
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/C32E05EEA10011EAA9C71D3AC4F9AE02.roa
File: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (raw, json)
Hash identifier: LmaTdsd1h1JqkjG4YXaY9iUmknysZAZ1jNPd9mJhPTE=
Subject key identifier: F4:96:68:B8:5A:DA:98:A4:D3:8C:39:7A:86:35:8C:6F:3B:A9:E4:FB
Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Certificate serial: 0ADE
Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/C32E05EEA10011EAA9C71D3AC4F9AE02.roa
Signing time: Sun 02 Aug 2026 16:29:00 +0000
ROA not before: Sun 02 Aug 2026 16:29:00 +0000
ROA not after: Wed 02 Dec 2026 00:00:00 +0000
asID: 45558
IP address blocks: 45.41.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2782 (0xade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Validity
Not Before: Aug 2 16:29:00 2026 GMT
Not After : Dec 2 00:00:00 2026 GMT
Subject: CN=6a6f704c-a71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:d4:f6:7e:ee:22:1b:d2:f3:d8:92:61:1a:
bc:49:a7:e2:32:1a:ee:dc:dd:e0:6f:b1:ea:c9:3f:
c8:75:93:52:25:1e:a6:fe:41:cd:91:d2:a6:ed:ee:
da:92:c0:20:da:0a:02:40:9c:d7:9f:c0:93:fd:9c:
a0:21:a2:b3:a7:39:63:e7:3b:26:47:51:ea:b3:d3:
5e:b4:d4:0a:d5:04:8e:93:a1:78:ce:c4:b4:2d:82:
f1:31:c3:8b:dd:62:3f:ec:c8:21:44:78:d4:39:53:
7e:ce:51:c4:89:62:19:33:e3:bf:05:52:60:64:b1:
00:e0:8a:de:5f:c7:ed:a4:63:d3:99:80:07:76:c8:
3d:3a:f5:25:04:25:b4:a4:d5:02:c9:d3:a6:24:e9:
c7:82:dd:be:29:77:29:3f:d1:6d:fc:7b:43:d8:17:
89:30:d1:10:e2:f6:d3:ac:d2:d4:dc:83:5f:7b:9a:
c3:b8:df:20:f4:d3:74:8e:ba:a1:a6:cd:67:3f:f2:
41:b0:f7:17:0b:22:dd:58:68:9a:64:7e:14:a9:01:
4a:60:ba:47:60:a4:2d:60:db:00:48:ab:ca:56:f9:
93:15:88:c6:66:47:cf:7a:e1:09:fc:9c:48:8b:de:
72:95:39:41:17:81:03:13:77:32:ef:cd:09:c6:64:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:96:68:B8:5A:DA:98:A4:D3:8C:39:7A:86:35:8C:6F:3B:A9:E4:FB
X509v3 Authority Key Identifier:
keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/C32E05EEA10011EAA9C71D3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.41.96.0/22
Signature Algorithm: sha256WithRSAEncryption
86:ef:22:ce:4b:53:4e:bd:78:41:c0:7a:29:dd:37:de:82:e0:
06:14:87:72:16:86:b6:da:f6:e8:34:ea:2b:b1:7b:ed:f4:83:
95:79:b7:37:b2:29:6c:ed:9f:e3:ad:87:09:07:1e:1d:14:d2:
9b:b1:5f:d7:96:da:0b:be:38:41:c4:55:ce:3b:97:1c:5d:0e:
11:e1:dc:6b:63:61:36:61:43:63:16:5d:b9:92:28:c7:56:89:
a8:9f:89:3f:64:10:5c:57:f0:dd:14:93:a6:a2:b9:98:6f:d7:
8f:88:ac:59:48:e5:81:b0:b7:fd:23:8b:4f:7c:16:9a:eb:bc:
ef:7a:5f:5f:f0:08:46:6b:30:20:86:c4:20:cd:c8:5e:25:c5:
35:3c:ea:66:ca:90:81:a3:bb:44:55:50:c1:57:69:04:ad:ac:
33:d5:25:b7:52:e7:37:ed:b2:36:4e:6a:8f:7b:a6:a5:eb:39:
4f:5b:01:d9:95:d7:29:e4:07:34:e6:94:67:c8:e0:98:35:00:
cb:d1:ca:47:6e:52:eb:b7:88:e2:fa:eb:8f:91:2b:31:ec:a5:
0e:1f:ab:f0:fa:4b:ab:05:9c:22:94:8e:ec:4a:42:25:bc:d9:
e1:54:cc:23:11:57:90:fe:60:0b:7b:e7:9a:5b:71:e3:22:6a:
c9:fc:e1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:36:43 2026 by rpki-client